Your key.
Your business.

The authenticator calculates codes in your browser. Pasted keys are not uploaded; keys in path links are sent with the page request.

Effective September 20, 2026

Secret keys and generated codes

Keys entered or pasted into the form stay in the current page’s memory. We do not send them to an API or write them to cookies or browser storage. Opening /KEY sends that key in the page request to the hosting server and CDN, where it may be recorded in logs. The alternative /#key=KEY keeps the key in a URL fragment, which browsers do not send in the HTTP request. Both link types are removed from the address bar after the application reads them; this does not erase existing server logs, copied links, or records held by browsers and other software. Use “Clear everything” to remove them from the interface and application state. Closing the tab ends the session; browsers and extensions control their own memory and session behavior.

Ordinary website requests

Your browser contacts the hosting server to load pages and assets. The hosting provider may process your IP address, browser information, requested path, and request time for delivery and security. The application itself does not create visitor logs or store accounts. Hosting log retention is controlled by the hosting operator.

Cookies and analytics

This release does not set cookies, use browser storage, or load analytics. Copying a code places it on your system clipboard at your request; your device may retain clipboard history.

Advertising

Advertising is disabled in this release. The authenticator page does not load advertising scripts, even if advertising is later enabled elsewhere. If ads are introduced on informational pages, this policy must be updated with the provider’s data practices and any required consent choices before activation.

Your choices

You can use the tool without registration, clear the current session, and choose not to copy codes. Only enter secrets on devices and browsers you trust. Extensions or other software with access to the page may be able to read its contents.

Changes

Updates to these practices will be reflected on this page with a revised effective date.